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DETAILED ACTION 

This action is in response to the papers filed 10/23/2007. Claims 1-29 were 
received for consideration. Claims 1, 12 and 21 were amended. Currently claims 1-29 
are under consideration. 

Response to Arguments 
Applicants arguments with respect to independent claim 1 have been considered 
but are not persuasive. Limsico in view of Kadooka clearly teaches "expiration logic 
residing on a first computer system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system and is operable to cause the user to be 
prompted to change the current password if the current password is determined to be 
approaching its expiration". Limsico teaches a local machine (i.e. first computer) with a 
password GUI operable to change a user's password on a remote computer system (i.e. 
second computer). Kadooka teaches expiration logic residing on a first computer 
(Limsico's local machine) system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system (Limsico's remote machine) and is operable to 
cause the user to be prompted to change the current password if the current password 
is determined to be approaching its expiration (see figure 4a). It is clearly shown that 
determine if the current password is approaching its expiration (steps 4-2 - 4-6) is prior 
to logging on (step 4-9). 
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Applicants arguments with respect to independent claim 12 have been 
considered but are not persuasive. Limsico in view of Kadooka clearly teaches 
"determining at the first computer system if the current password is approaching its 
expiration prior to logging onto the switched access remote test system residing on a 
second computer system". Limsico teaches a local machine (i.e. first computer) with a 
password GUI operable to change a user's password on a remote computer system (i.e. 
second computer). Kadooka teaches expiration logic residing on a first computer 
(Limsico's local machine) system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system (Limsico's remote machine) and is operable to 
cause the user to be prompted to change the current password if the current password 
is determined to be approaching its expiration (see figure 4a). It is clearly shown that 
determine if the current password is approaching its expiration (steps 4-2 - 4-6) is prior 
to logging on (step 4-9). 

Applicants arguments with respect to independent claim 21 have been 
considered but are not persuasive. Limsico in view of Kadooka cleariy teaches 
"determining at the first computer system if the current password is approaching its 
expiration prior to logging onto the switched access remote test system residing on a 
second computer system". Limsico teaches a local machine (i.e. first computer) with a 
password GUI operable to change a user's password on a remote computer system (i.e. 
second computer). Kadooka teaches expiration logic residing on a first computer 
(Limsico's local machine) system operable to determine if the current password is 
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approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system (Limsico's remote machine) and is operable to 
cause the user to be prompted to change the current password if the current password 
is determined to be approaching its expiration (see figure 4a). It is clearly shown that 
determine if the current password is approaching its expiration (steps 4-2 - 4-6) is prior 
to logging on (step 4-9). 

Claim Rejections - 35 USC § 103 
The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 102 of this title, if the, differences between the subject nfiatter sought to be patented and , 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

Claims 1-10 and 12-29 are rejected under 35 U.S.C. 103(a) as being 
unpatentable over Limsico (U.S. Patent # 5,793,952) in view of Ackroff (U.S. Patent* 
5,105,438) in further view of Kadooka (U.S. Patent # 5,606,663). The Limsico (U.S. 
Patent # 5,793,952) reference with respect to claim 1 teaches a password management 
system, comprising a graphical user interface logic residing on a first computer system 
(see figure 3 element 310) operable to receive a current password from a user, prompt 
the user to determine whether the user desires to change the current password, and 
responsive to the user response receive a new password (see figure 3 and column 3 
line 42-54). Password confirmation logic residing on a first computer system operable to 
confirm the current password associated with the user on a remote computer system 
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residing on a second computer system (see figure 3 element 350) remote from the first 
computer system (see figure 3); password administration logic residing on a first 
computer system, responsive to the password confirmation logic and the graphical user 
interface, operable to receive the new password and to change the current password on 
the remote computer system (see figure 2 and column 4 line 57 - column 5 line 54). 
The Limsico reference does not teach that the remote computer system is a switched 
access remote test system (SARTS) and expiration logic residing on a first computer 
system operable to determine if the current password is approaching its expiration prior 
to logging onto the switched access remote test system residing on a second computer 
system and is operable to cause the user to be prompted to change the current 
password if the current password is determined to be approaching its expiration. The 
Ackroff reference teaches that the remote computer system is a switched access 
remote test system (see column 3 line 1 8-29). It would have been obvious at the time 
the invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to have made the remote computer system taught by Limsico to be a 
switched access remote test system as discussed by Ackroff. SARTS providides a data 
base of circuit configurations and other key information, and in combination with a 
human interface for accessing circuits, issues test commands and receives 
measurements. The test equipment is not local to the circuit that is in trouble as it is 
more economical to make the test from a remotely centralized location (see column 1 
lines 44-50). Therefore one would have been motivated to include a switched access 
remote test system on a password manager that is operable to change the current 
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password at determined time or when the user request a change of password to keep 
the Switched access remote test system secure and only qualified user access to the 
switched access remote test system. The Kadooka reference teaches expiration logic 
residing on a second computer system operable to determine if the current password is 
approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system remote from the first computer system and is 
operable to cause the user to be prompted to change the current password if the current 
password is determined to be approaching its expiration (see figure 4a). It would have 
been obvious at the time the invention was made to a person having ordinary skill in the 
art to which said subject matter pertains to make it possible to set the available period 
on the system side for each password according to the access frequency of the user 
whom the password identifies, prescribe a password updating period for a certain length 
of time immediately preceding the expiration of the available period, inform the user who 
logs in the system during the updating period that the expiration of his password is 
imminent by displaying a message requesting him to change his password, and thereby 
urge him to update his password. Therefore one would be motivated to warn the user 
and set different length updating periods so a user who seldom accesses the system 
does not become unable to log in the system because his password has mn out of its 
available period even if he never accessed the system during that period (see Kadooka 
column 1 lines 38-58). 

With respect to claim 2, the password confirmation logic is operable to send the 
current password to the switched access remote test system (i.e remote machine as 
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taught by Ackroff) and receive a response from tiie switcfied access remote test system 
(I.e remote machine as taught by Ackroff also see Limsico column 5 line 43 - column 6 
line 65). 

With respect to claim 3, the password confirmation logic is operable to compare 
the response with a plurality of expected responses and determine whether the current 
password provided by the user is valid (see Limsico column 6 lines 5-28). 

With respect to claim 4, the response is an alphanumeric string, and the plurality 
of expected responses comprises erroneous responses and successful responses (see 
Limsico column 5 line 43 - column 7 line 16). 

With respect to claim 5, the password confirmation logic is operable to instruct 
the graphical user interface logic to provide any of a plurality of error messages to the 
user upon the password confirmation logic determining that the current password 
provided by the user is not valid (see Limsico figure 5B elements 5160, 5190, and 5310 
"Display Error Message" and column 5 line 43 - column 6 line 54). 

With respect to claim 6, the password administration logic performs a password 
change upon receiving a request to change the password from the graphical user 
interface (see Limsico column 5 line 43-54). 

With respect to. claim 7, the password administration logic performs a password 
change upon receiving a confirmation of the password from the password confirmation 
logic (see Limsico figure 5C element 5250 "Display Verify Password GUI" and column 6 
lines 18-39). 
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With respect to claim 8, the password administration logic is operable to send the 
current password and the new password to the switched access remote test system (i.e 
remote machine as taught by Ackroff) and receive a response from the switched access 
remote test system (i.e remote machine as taught by Ackroff), and compare the 
response to a plurality of expected responses (see Limsico column 5 lines 43 and 
column 7 lines 16). 

With respect to claim 9, the password administration logic is operable to instruct 
the graphical user interface logic to provide any of a plurality of error messages to the 
user upon the password administration logic determining that the new password 
provided by the user was not accepted by the switched access remote test system (see 
Limsico figure 5 elements 5160, 5190, and 5310 "Display Error Message" and column 5 
line 43 - column 6 line 54). 

With respect to claim 10, the Limsico reference further comprises a password file 
operable to store a set of data comprising the expiration date of the current password; 
wherein the expiration logic is operable to read the password file and request that the 
graphical user interface notify the user that the current password is nearing expiration 
responsive to the expiration date (see Limsico column 9 line 5-40). 

With respect to claim 12 and 21 , the Limsico reference teaches, a method of 
managing passwords, comprising the steps of providing a user with a graphical user 
interface residing on a first computer system (see figure 3 element 310). Receiving a 
current password from the user via the graphical user interface for a remote computer 
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system residing on a second computer system (see figure 3 element 350) remote from 
the first computer system. Prompting the user on whether to change the current 
password, receiving a new password from the user responsive to the user response to 
the prompting (see figure 3 and column 3 lines 41-54 and column 4 line 57 - column 5 
line 2). Confirming the current password with the remote computer system and 
requesting that the remote computer system change the password responsive to the 
user response to the prompting (see column 5 line 43 - column 6 line 65). The Limsico 
reference does not teach that the remote computer system is a switched access remote 
test system and detemriining at the first computer system if the current password is 
approaching its expiration prior to logging onto the switched access remote test system 
residing on a second computer system. The Ackroff reference teaches that the remote 
computer system is a switched access remote test system (see column 3 line 18-29). It 
would have been obvious at the time the invention was made to a person having 
ordinary skill in the art to which said subject matter pertains to have made the remote 
computer system taught by Limsico to be a switched access remote test system as 
discussed by Ackroff. SARTS providides a data base of circuit configurations and other 
key information, and in combination with a human interface for accessing circuits, 
issues test commands and receives measurements. The test equipment is not local to 
the circuit that is in trouble as it is more economical to make the test from a remotely 
centralized location (see column 1 lines 44-50). Therefore one would be motivated to 
include a switched access remote test system on a password manager that is operable 
to change the current password at determined time or when the user request a change 
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of password to keep the Switched access remote test system secure and only qualified 
user access to the switched access remote test system. The Kadooka reference 
teaches determining at the first computer system if the current password is approaching 
its expiration prior to logging onto the switched access remote test system residing on a 
second computer system (see figure 4a). It would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject 
matter pertains to make it possible to set the available period on the system side for 
each password according to the access frequency of the user whom the password 
identifies, prescribe a password updating period for a certain length of time immediately 
preceding the expiration of the available period, inform the user who logs in the system 
during the updating period that the expiration of his password is imminent by displaying 
a message requesting him to change his password, and thereby urge him to update his 
password. Therefore one would be motivated to warn the user and set different length 
updating periods so a user who seldom accesses the system does not become unable 
to log in the system because. his password has run out of its available period even if he 
never accessed the system during that period (see Kadooka column 1 lines 38-58). 

With respect to claims 13 and 22, the confirming the current password further 
comprises sending the current password to the switched access remote test system (i.e 
remote machine as taught by Ackroff) and receiving a response from the switched 
access remote test system (i.e remote machine as taught by Ackroff also see Limsico 
column 5 line 43 - column 6 line 65 and column 7 line 46 - column 9 line 15). 



Application/Control Number: 10/729,293 Page 1 1 

Art Unit: 2132 

With respect to claims 14 and 23, the confirming the current password further 
comprises comparing the response from the switched access remote test system with a 
plurality of expected responses (see LImsico column 5 lines 43 - column 7 lines 16). 

With respect to claims 15 and 24, the confirming the current password further 
comprises notifying the user of an error responsive to comparing the response from the 
switched access remote test system (see Limsico column 5 line 43 - column 6 line 65 
i.e. an error message is displayed at step 5310). 

With respect to claims 16 and 25, the requesting that the switched access remote 
test system (i.e remote machine as taught by Ackroff) change the password responsive 
to the user response to the prompting further comprises sending the new password to 
the switched access remote test system (i.e remote machine as taught by Ackroff) along 
with the current password (see Limsico column 4 line 57 - column 5 line 12 and column 
8 line 58-63). 

With respect to claims 17 and 26, the requesting that the switched access remote 
test (i.e remote machine as taught by Ackroff) system change the password responsive 
to the user response to the prompting further comprises receiving a response from the 
switched access remote test system (i.e remote machine as taight by Ackroff) after 
sending the new password (see Limsico column and column 1 1 lines 6-10). 

With respect to claims 18 and 27, further comprising the step of comparing the 
received response with a plurality of expected responses (see Limsico column 5 line 43 

3 

- column 7 line 16). 
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With respect to claims 19 and 28, further comprising the step of providing an 
error message to the user responsive to the comparing the received response (see 
Limsico figure 5 elements 5160, 5190, and 5310 "Display Error Message" and column 5 
line 43 - column 6 line 54). 

With respect to claims 20 and 29, further comprising the steps of reading a 
password file to determine an expiration date associated with the current password and 
prompting the user to change the password responsive to determination of the 
expiration date (see Limsico column 9 lines 5^0). 

Claim 11 is rejected under 35 U.S.C. 103(a) as being unpatentable over Limsico 
(U.S. Patent # 5,793,952) in view of Ackroff (U.S. Patent # 5,105,438) in view of 
Kadooka (U.S. Patent # 5,606,663) in further view of Goldberg et al (U.S. Patent # 
5,748,890). Limsico in view of Ackroff teaches everything with respect to claim 1 above 
but with respect to claim 1 1 the Limsico in view of Achroff does not teaches a password 
management system is operable to interact with at least two switched access remote 
testing systems through a second graphical user interface that forms a wrapper for said 
at least two switched access remote testing system. Goldberg teaches a password 
management system is operable to interact with at least two switched access remote 
testing systems (i.e remote machine as taught by Limsico in view of Ackroff) through a 
second graphical user interface that forms a wrapper for said at least two switched 
access remote testing system (i.e remote machine as taught by Limsico in view of 
Ackroff, also see Goldberg column 1 lines 26-67). It would have been obvious at the 
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time the invention was made to a person having ordinary skill in the art to which said 
subject matter pertains to have modified a remote password management system that 
would be able to interact with at least two host. Therefore one would have been 
motivated to design a password management system that could be use interact with at 
least two host to make it easier and more secure then having one password for each 
host. Trying to remember different passwords for each host is very time consuming, 
expensive, and ineffective from an accountably standpoint. Have one system would 
have made it a lot easier than having books with host applications and corresponding 
passwords (see column 1 lines 13-55). 

Conclusion 

THIS ACTION IS MADE FINAL. Applicant is reminded of the extension of time 
policy as set forth in 37 CFR 1 .136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1.136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the mailing date of this final action. 
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Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Devin Almeida whose telephone number is (571) 270- 
1018. The examiner can normally be reached on Mon-Thur 8:00-5:30 Second Fri 8:00- 
4:30 EST. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Gilberto Barron can be reached on (571) 272 3799. The fax phone number 
for the organization where this application or proceeding is assigned is 571-273-8300. 

Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 
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